Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
File:                     DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft (raw, json)
Hash identifier:          mQL64c7vdpDWWWJS6T2NKSYrGOkInbDkODJKMnSj1EU=
Subject key identifier:   2C:5E:1C:C4:38:16:90:F7:C0:CE:78:87:25:6A:9A:A0:0E:2C:AE:5D
Authority key identifier: DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA
Certificate issuer:       /CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
Certificate serial:       4C203F5ACA880995D119D24488C98BE14A15E465
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
Manifest number:          15
Signing time:             Wed 20 Nov 2024 01:01:38 +0000
Manifest this update:     Wed 20 Nov 2024 00:56:38 +0000
Manifest next update:     Mon 25 Nov 2024 10:50:38 +0000
Files and hashes:         1: 323830313a3132363a3a2f34342d3434203d3e20323632353839.roa (hash: ZdMFSSnl+bVCAYLkfOFhjzGcKskoNNiklFm/f+K/Sc4=)
                          2: DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl (hash: 0lCFzBs3QVQ4Fm3vNWuCUHTJ+bkW2mRtNv0itboPclw=)

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:20:3f:5a:ca:88:09:95:d1:19:d2:44:88:c9:8b:e1:4a:15:e4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA
        Validity
            Not Before: Nov 20 00:56:38 2024 GMT
            Not After : Nov 25 10:50:38 2024 GMT
        Subject: CN=2C5E1CC4381690F7C0CE7887256A9AA00E2CAE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:d0:41:11:2d:13:53:c0:7d:95:c4:d5:f7:
                    f1:ca:42:6c:03:5a:da:c4:c3:e4:74:ee:f5:d2:75:
                    32:d9:84:7d:e9:06:7f:c4:4a:18:5a:7e:60:5f:3e:
                    2a:f7:13:dc:5d:52:59:b2:80:11:d7:d5:58:12:ad:
                    10:70:c6:3a:b9:13:28:34:3c:69:42:18:df:7c:c2:
                    80:eb:a5:12:b9:cf:13:b4:b7:ca:27:8c:26:c5:d2:
                    4c:65:62:f9:ba:c5:02:90:40:f6:89:70:43:c6:a0:
                    07:57:28:7c:ac:9b:a0:61:c4:3e:a4:0b:53:ee:91:
                    a8:4d:ea:b7:1d:86:f5:f2:93:6f:e1:54:07:ef:87:
                    fe:e6:fd:dd:43:c2:0a:c5:32:d0:5e:1e:06:82:b6:
                    da:16:cb:51:84:73:18:98:2b:17:5a:5f:97:57:1f:
                    ad:c4:ed:4f:43:0a:f0:f8:46:56:9d:ab:70:0e:e4:
                    42:7b:c3:82:53:e9:85:c9:d0:cf:a2:cb:d0:d4:aa:
                    5a:9a:74:d7:1b:ae:6e:4f:5f:92:2e:57:6e:7e:c5:
                    38:a4:6f:3b:e9:7b:71:13:30:b6:57:93:a5:6d:46:
                    0a:a3:b7:0d:55:f0:de:16:5d:e8:de:02:b2:c9:51:
                    e1:0b:75:2c:e0:f2:76:46:2f:62:c8:40:91:90:7b:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5E:1C:C4:38:16:90:F7:C0:CE:78:87:25:6A:9A:A0:0E:2C:AE:5D
            X509v3 Authority Key Identifier:
                keyid:DA:08:9F:A2:42:DF:F5:A5:D9:12:D8:E5:A1:82:FD:C3:22:BB:B5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29F527DE4BCE9802780AAF40E5EA852B9F1B942181F708B510CA9213AA08D240/0/DA089FA242DFF5A5D912D8E5A182FDC322BBB5FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:a6:e6:f6:e5:e0:22:a4:c2:38:a6:82:c3:ee:ee:cd:7e:
         27:52:ec:2d:92:9a:15:e7:32:35:dd:3b:05:44:60:e8:ab:fe:
         4d:20:b5:75:2f:db:ed:82:8d:f9:39:e3:a0:d9:05:9e:96:0a:
         69:4e:7c:eb:8e:29:1e:a4:ae:0f:d5:5d:10:d4:c6:f8:d8:ac:
         11:17:2a:c7:84:71:37:08:04:a3:f2:37:d6:ae:53:38:ed:6f:
         22:f3:29:ff:4e:2f:87:7d:1d:56:dc:59:6e:ba:68:64:7c:3a:
         00:45:f3:3e:6e:2e:61:6b:10:ad:56:69:c1:27:e5:3d:01:f4:
         5b:21:71:e7:29:a9:44:83:33:08:d9:59:a5:ed:9f:fe:16:b4:
         18:f7:45:83:0a:94:7c:34:ed:b1:9c:42:4c:ea:f6:22:db:35:
         1d:f3:e0:d1:05:d4:00:6e:20:e6:d9:38:cd:c9:7f:12:c8:7d:
         a8:e9:cd:83:2e:e4:9e:4d:3e:86:c8:c5:2e:17:7a:e4:bd:e1:
         0a:2b:b2:51:d9:b8:9b:f5:ba:01:f0:77:61:3b:7d:db:b9:75:
         81:77:a9:0a:d1:11:5d:f2:99:2f:a6:b5:03:c0:dc:2a:3a:3c:
         b6:5c:95:5a:bf:fe:12:93:38:c8:40:00:dd:5a:b3:16:06:90:
         2c:4b:bb:7d
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIUTCA/WsqICZXRGdJEiMmL4UoV5GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEwODlGQTI0MkRGRjVBNUQ5MTJEOEU1QTE4MkZEQzMy
MkJCQjVGQTAeFw0yNDExMjAwMDU2MzhaFw0yNDExMjUxMDUwMzhaMDMxMTAvBgNV
BAMTKDJDNUUxQ0M0MzgxNjkwRjdDMENFNzg4NzI1NkE5QUEwMEUyQ0FFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY+tBBES0TU8B9lcTV9/HKQmwD
WtrEw+R07vXSdTLZhH3pBn/EShhafmBfPir3E9xdUlmygBHX1VgSrRBwxjq5Eyg0
PGlCGN98woDrpRK5zxO0t8onjCbF0kxlYvm6xQKQQPaJcEPGoAdXKHysm6BhxD6k
C1PukahN6rcdhvXyk2/hVAfvh/7m/d1DwgrFMtBeHgaCttoWy1GEcxiYKxdaX5dX
H63E7U9DCvD4Rladq3AO5EJ7w4JT6YXJ0M+iy9DUqlqadNcbrm5PX5IuV25+xTik
bzvpe3ETMLZXk6VtRgqjtw1V8N4WXejeArLJUeELdSzg8nZGL2LIQJGQe5ktAgMB
AAGjggLTMIICzzAdBgNVHQ4EFgQULF4cxDgWkPfAzniHJWqaoA4srl0wHwYDVR0j
BBgwFoAU2gifokLf9aXZEtjloYL9wyK7tfowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yOUY1MjdERTRCQ0U5ODAyNzgwQUFGNDBFNUVBODUyQjlG
MUI5NDIxODFGNzA4QjUxMENBOTIxM0FBMDhEMjQwLzAvREEwODlGQTI0MkRGRjVB
NUQ5MTJEOEU1QTE4MkZEQzMyMkJCQjVGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTA4OUZBMjQyREZGNUE1RDkx
MkQ4RTVBMTgyRkRDMzIyQkJCNUZBLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG
CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjlGNTI3REU0QkNFOTgwMjc4MEFBRjQwRTVFQTg1MkI5RjFCOTQyMTgx
RjcwOEI1MTBDQTkyMTNBQTA4RDI0MC8wL0RBMDg5RkEyNDJERkY1QTVEOTEyRDhF
NUExODJGREMzMjJCQkI1RkEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB
/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeH6bm9uXgIqTCOKaCw+7uzX4n
UuwtkpoV5zI13TsFRGDoq/5NILV1L9vtgo35OeOg2QWelgppTnzrjikepK4P1V0Q
1Mb42KwRFyrHhHE3CASj8jfWrlM47W8i8yn/Ti+HfR1W3FluumhkfDoARfM+bi5h
axCtVmnBJ+U9AfRbIXHnKalEgzMI2Vml7Z/+FrQY90WDCpR8NO2xnEJM6vYi2zUd
8+DRBdQAbiDm2TjNyX8SyH2o6c2DLuSeTT6GyMUuF3rkveEKK7JR2bib9boB8Hdh
O33buXWBd6kK0RFd8pkvprUDwNwqOjy2XJVav/4SkzjIQADdWrMWBpAsS7t9
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org